CVE-2011-0140

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0140

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0140

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0140

CVE-2011-0140 affects WebKit used by Apple iTunes on Windows prior to 10.2. It allows MITM-related vectors in iTunes Store browsing to trigger memory corruption, enabling arbitrary code execution or a denial of service (application crash). The vulnerability is rooted in WebKit components within i...

Apple iTunes < 10.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.2. As such, it is affected by numerous issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52534; scriptversion"1.21";...

CentOS Update for evolution28-pango CESA-2010:0140 centos4 i386

Check for the Version of evolution28-pango OpenVAS Vulnerability Test CentOS Update for evolution28-pango CESA-2010:0140 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

CVE-2010-0140

CVE-2010-0140 concerns Cisco Unified MeetingPlace web server vulnerabilities that allow an unauthenticated attacker to create a regular user or an administrator account via a crafted URL to the internal interface. The vulnerability is documented as part of Cisco Bug IDs CSCtc59231 and CSCtd40661....

CVE-2009-0140

CVE-2009-0140 affects Apple Mac OS X 10.4.11 and 10.5.6 with an unspecified issue in the SMB component that allows a remote SMB server to trigger a memory exhaustion DoS via a crafted file-system name, potentially causing system shutdown. OpenVAS entries confirm Security Update 2009-001 as the re...

Apple Mac OS X 2009-001更新修复多个安全漏洞

BUGTRAQ ID: 33759 CVECAN ID: CVE-2009-0009,CVE-2009-0020,CVE-2009-0142,CVE-2009-0011,CVE-2009-0012,CVE-2009-0013,CVE-2009-0014,CVE-2009-0015,CVE-2009-0017,CVE-2009-0018,CVE-2009-0019,CVE-2009-0137,CVE-2009-0138,CVE-2009-0139,CVE-2009-0140,CVE-2009-0141 Mac OS X是苹果家族机器所使用的操作系统。 Apple...

CVE-2008-0210

Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sessauth=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal attacks without...

Directory traversal

Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sessauth=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal attacks without...

CVE-2008-0140

CVE-2008-0140 affects Uebimiau Webmail 2.7.10 and 2.7.2, where a directory traversal vulnerability in error.php allows remote authenticated users to read arbitrary files via a .. in the selected_theme parameter. This is a separate vector from CVE-2007-3172. The connected sources confirm the affec...

CVE-2007-0140

The CVE-2007-0140 entry describes an SQL injection in the down.asp page of Kolayindir Download (Yenionline). The vulnerability allows remote attackers to execute arbitrary SQL commands through the id parameter, enabling partial confidentiality and integrity impact and potential partial availabili...

CVE-2006-0140

NavBoard CVE-2006-0140 is a cross-site scripting (XSS) vulnerability in post.php for NavBoard v16 Stable (2.6.0) and v17beta2. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) b, (2) textlarge, and (3) url bbcode tags. Connected documents confirm the affected c...

CVE-2005-0140

CVE-2005-0140 affects PeID: a buffer overflow in the Import Address Table when processing a PE file with a long import library name can allow arbitrary code execution. Documents consistently describe this as a buffer overflow vulnerability in PeID and do not provide a published fix or affected ve...

CVE-2003-0140

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...

CVE-2003-0140

CVE-2003-0140 describes a buffer overflow in Mutt’s IMAP code (affecting Mutt 1.4.x, earlier 1.5.x up to 1.5.3) and in other code paths such as Balsa before 2.0.10 that include Mutt components. The overflow can be triggered by a malicious IMAP server via a crafted folder, allowing a remote attack...

CVE-2003-0140

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...

CVE-2002-0140

Domain Name Relay Daemon dnrd 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parsequery, getobjectname, and possibly other functions...

CVE-2002-0140

CVE-2002-0140 affects Domain Name Relay Daemon (dnrd) version 2.10 and earlier. The vulnerability arises when processing DNS responses; long or malformed replies are not properly handled by parse_query and get_objectname (and possibly other functions), allowing remote DNS sites to trigger a denia...